﻿<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<!-- saved from url=(0029)http://www.helpandmanual.com/ -->
<head> 
   <title>Passwords</title> 
   <!-- Template design (c) copyright 2008-2009 by Tim Green and EC Software -->
   <meta name="generator" content="Help &amp; Manual" /> 
   <meta name="keywords" content="" />
   <meta name="description" content="Passwords" />
   <meta name="copyright" content="© 2012 Kentico Software" /> 
   <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /> 
   <meta http-equiv="X-UA-Compatible" content="IE=EmulateIE7" />
   <link type="text/css" href="default.css" rel="stylesheet" /> 
   <link type="text/css" href="custom.css" rel="stylesheet" />

   <script type="text/javascript" src="jquery-1.3.2.min.js"></script>
   <script type="text/javascript" src="jquery.scrollTo-min.js"></script>
   <script type="text/javascript" src="nsh.js"></script>



         
   <!-- CSS set with project variables and local attributes --> 
   <style type="text/css" media="screen"> 
   body { background: #fff; } 
   #breadcrumbs {width: 100%; background-color: white; border-bottom: 1px solid #000; padding: 0px 0px 5px 15px;
   margin: 3px 0; font-size: 8pt; color: #000;}
   #breadcrumbs a { color: #000; text-decoration: none;}
   #breadcrumbs a:visited { color: #000; }
   #breadcrumbs a:hover { color: #098ae2; text-decoration: none; }
   .help-url { font-size: 10pt; font-family: Arial, Verdana, Helvetica, sans-serif; 
               color: #1f84e8; text-align: center; margin: 5px 20px 10px 0px; 
               padding-top: 14px; border-top: 1px solid #000;}
   .help-url a { color: #098ae2; text-decoration: none; }
   .help-url a:visited { color: #098ae2; }
   .help-url a:hover { color: #098ae2; text-decoration: underline; }
   .highlight {background: #ffff40;}
   .breadhead {padding: 5px 0px 0px 0px !important;}    
   #innerdiv   
   {   
   padding-left: 5px;
   }
   

   </style> 

<!-- Adjustment for IE -->
<!--[if lte IE 8]>
<style type="text/css">
.topichead { padding-right: 0; }
   
   
   	.breadhead {
	margin: 0;
	padding-right: 5px;
	}
   
   
</style>
<![endif]-->
   
<script type="text/javascript">
// Initialize the page 
addEvent(window, "load", nsrInit);
addEvent(window, "load", doResize);
addEvent(window, "resize", doResize);
addEvent(window, "load", toggleJump);

</script>


<script type="text/javascript">
function mailFB_custom() {
var headerText = unQuot("Feedback on: Kentico CMS 6.0 Context Help - Passwords".replace('&nbsp;',''));
var fb1 = "mailto:" + escape('Kentico Support Team <support@kentico.com>') + "?subject=" + headerText;
var titlePath = unQuot("CMS Site Manager &gt; Settings &gt; Security &amp; Membership &gt; Passwords /");
var fb2 = "&body=Ref:%20" + titlePath + "%20ID:%20settings_membershippasswords%0A%0D%0A%0D" + unQuot("Dear Support Staff,") + "%0A%0D%0A%0D";
var fb = fb1 + fb2;
document.location.href=fb;
}
</script>
<script type="text/javascript">

  var _gaq = _gaq || [];
  _gaq.push(['_setAccount', 'UA-105987-4']);
  _gaq.push(['_setDomainName', '.kentico.com']);
  _gaq.push(['_trackPageview']);

  (function() {
    var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
    ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
    var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
  })();

</script>        
<script type="text/javascript" src="helpman_topicinit.js"></script>
<!-- Redirect browser to frame page if page is not in the content frame. -->
<script type="text/javascript">
<!--
if (location.search.lastIndexOf("toc=0")<=0) {
  if (parent.frames.length==0) { parent.location.href="index.html?settings_membershippasswords.htm"; }
  else { parent.quicksync('a2.3.3.1'); }
}
//-->
</script>
<script type="text/javascript" src="highlight.js"></script></head> 
<body onload="highlight();">
<div id="hmpopupDiv" style="visibility:hidden; position:absolute; z-index:1000; "></div>
<!--ZOOMSTOP-->

<div id="printheader">
<span id="printtitle">Kentico CMS 6.0 Context Help</span><br />
<p class="p_Heading1"><span class="f_Heading1">Passwords</span></p>
</div>
<div id="idheader" style="border-bottom:1px solid #000;margin:0px 0px;"> 
<table id="breadtable" border="0" cellspacing="0" cellpadding="0" width="100%"> 
  <tr >
  <td align="left" class="breadhead" >
       <p id="breadcrumbs"><a href="mode_selection.htm"
        onmouseover="document.images.main.src='home_h.gif'" 
        onmouseout="document.images.main.src='home.gif'">
        <img name="main" src="home.gif" border="0" alt="Home topic" title="Home topic" /></a> 
        
        CMS Site Manager &gt; <a href="settings_settings.htm">Settings</a> &gt; <a href="settings_membership.htm">Security &amp; Membership</a>:</p> 
  </td>
  </tr>
</table>
<table width="99%" border="0" cellspacing="0" cellpadding="0" id="headtable"> 

<!-- Script version of NavHeader -->
  <tr id="scriptNavHead" valign="middle" style="height: auto;"> 
    <td align="left" class="topichead" style="padding-left: 15px;"> 
    <p class="p_Heading1"><span class="f_Heading1">Passwords</span></p>

    </td>
    <td align="center" width="20" class="idnav" valign="bottom">
     <a href="settings_membership.htm"
        onmouseover="document.images.prev.src='button_prev_h.gif'" 
        onmouseout="document.images.prev.src='button_prev.gif'">
        <img name="prev" src="button_prev.gif" border="0" alt="Previous topic" title="Previous topic" /></a>
     
   </td>
   
   <td align="center" width="20" class="idnav" valign="bottom">
     <a href="settings_membershipprotection.htm"
        onmouseover="document.images.next.src='button_next_h.gif'" 
        onmouseout="document.images.next.src='button_next.gif'"><img name="next" src="button_next.gif" border="0" alt="Next topic" title="Next topic" /></a>
        
   </td>

   
   
   
   
   

     
   <td id="print-button" align="center" width="20" class="idnav" valign="bottom">
     <a href="javascript: print();" 
     onmouseover="document.images.printbutton.src='print_h.gif'" 
     onmouseout="document.images.printbutton.src='print.gif'"><img name="printbutton" border="0" alt="Print this topic" title="Print this topic" src="print.gif" /></a>
   </td>  
     
     

  
   <td id="mail-feedback" align="center" width="20" class="idnav" valign="bottom">
   <a href="#"
        onclick='mailFB_custom();'
        onmouseover="document.images.feedback.src='mail_h.gif'" 
        onmouseout="document.images.feedback.src='mail.gif'"><img name="feedback" src="mail.gif" border="0" alt="Mail us feedback on this topic!" title="Mail us feedback on this topic!" /></a>
   </td>
   
   <td width="4">&nbsp;</td>
  </tr>
<!-- End script navheader version -->

<!-- NoScript version of navheader -->

  <tr id="noScriptNavHead" valign="middle" style="height: auto;"> 
    <td align="left" class="topichead"> 
    <p class="p_Heading1"><span class="f_Heading1">Passwords</span></p>

    </td>
    <td align="center" width="20" class="idnav" valign="bottom">
     <a href="settings_membership.htm">
        <img src="button_prev.gif" border="0" alt="Previous topic" title="Previous topic" /></a>
     
   </td>
   
   <td align="center" width="20" class="idnav" valign="bottom">
     <a href="settings_membershipprotection.htm">
        <img src="button_next.gif" border="0" alt="Next topic" title="Next topic" /></a>
        
   </td>
   
   
   
  
   

     
     
   <td align="center" width="20" class="idnav" valign="bottom">
   <img border="0" alt="JavaScript is required for the print function" title="JavaScript is required for the print function" src="print_d.gif" />
   </td>
     
     
   
   <td align="center" width="20" class="idnav" valign="bottom">
   <a href="mailto:support@kentico.com?subject=Documentation%20feedback&body=Ref%20ID:%20settings_membershippasswords%0D%0D"><img src="mail.gif" border="0" alt="Mail us feedback on this topic!" title="Mail us feedback on this topic!" /></a>
   </td>
   
   <td width="4">&nbsp;</td>
  </tr>

<!-- End noscript navheader version -->
  </table>
<div id="autoTocWrapper"></div>
</div> 

<div id="idcontent"><div id="innerdiv">
<!--ZOOMRESTART-->
<div style="text-align: left; text-indent: 0px; padding: 0px 0px 0px 0px; margin: 0px 0px 0px 0px;"><table width="820" cellspacing="0" cellpadding="5" border="0" style="border: none; border-spacing:0px; border-collapse: collapse;">
<tr style="text-align:left;vertical-align:top;">
<td colspan="2" valign="middle" width="568" style="width:568px; border: solid 1px #000000;"><p><span style="font-weight: bold;">Passwords</span></p>
</td>
</tr>
<tr style="text-align:left;vertical-align:top;">
<td valign="middle" width="228" style="width:228px; border: solid 1px #000000;"><p>Send password e-mails from</p>
</td>
<td valign="top" width="568" style="width:568px; border: solid 1px #000000;"><p>Sets the e-mail address from which password recovery e-mails will be sent.</p>
</td>
</tr>
<tr style="text-align:left;vertical-align:top;">
<td valign="middle" width="228" style="width:228px; border: solid 1px #000000;"><p>Password format</p>
</td>
<td valign="top" width="568" style="width:568px; border: solid 1px #000000;"><p>Selects the format used to store the passwords of users. They may either be saved in plain text or as the result of a security hash function. The recommended option that provides the best security is <span style="font-style: italic;">SHA2 with salt</span>.</p>
<p>&nbsp;</p>
<p>If you change the password format, please keep in mind that this only affects how future passwords are stored and existing passwords will remain unchanged. It is necessary to set all passwords again so that they are stored in the new format. For this reason, it is recommended to set the appropriate format directly after the installation, before you create user accounts or allow users to start registering.</p>
<p>&nbsp;</p>
<p><span style="font-weight: bold;">Please note</span>: An empty string in the <span style="font-weight: bold;">UserPassword</span> field of the <span style="font-weight: bold;">CMS_User</span> database table is considered to be a blank password for both plain text and hashed password formats. If you forget the global administrator password, you can manually insert an empty value to reset it.</p>
</td>
</tr>
<tr style="text-align:left;vertical-align:top;">
<td valign="middle" width="228" style="width:228px; border: solid 1px #000000;"><p>Reset password requires e‑mail approval</p>
</td>
<td valign="top" width="568" style="width:568px; border: solid 1px #000000;"><p>If checked, users who submit a password recovery request through a logon form will not receive their password directly, but will instead be sent an e‑mail containing a link to a page where they can manually set a new password.</p>
<p>&nbsp;</p>
<p>If disabled, the system will send an e‑mail to the given user containing their current password if passwords are stored in plain text, or a newly generated password if hashing is used.</p>
</td>
</tr>
<tr style="text-align:left;vertical-align:top;">
<td valign="middle" width="228" style="width:228px; border: solid 1px #000000;"><p>Reset password page URL</p>
</td>
<td valign="top" width="568" style="width:568px; border: solid 1px #000000;"><p>Sets the URL of the page where users can change their password after they submit a password recovery request. The <a href="http://devnet.kentico.com/docs/6_0/webparts/ResetPassword_overview.htm" target="_blank" class="weblink">Reset password</a> web part must be placed on the specified page to ensure that users can set a new password.</p>
<p>&nbsp;</p>
<p>The value of this setting is used by the administration interface logon page and inherited by individual <span style="font-weight: bold;">Logon form</span> web parts if their own <span style="font-weight: bold;">Reset password page</span> property is not set.</p>
<p>&nbsp;</p>
<p>If empty, the <span style="font-weight: bold;">~/CMSModules/Membership/CMSPages/ResetPassword.aspx</span> default page is used.</p>
</td>
</tr>
<tr style="text-align:left;vertical-align:top;">
<td valign="middle" width="228" style="width:228px; border: solid 1px #000000;"><p>Reset password interval</p>
</td>
<td valign="top" width="568" style="width:568px; border: solid 1px #000000;"><p>Sets the length (in hours) of the time interval during which users will be allowed to change their password after submitting a password recovery request (if the <span style="font-weight: bold;">Reset password requires e‑mail approval</span> setting is enabled). After the specified amount of hours, the link in the password recovery e‑mail will expire and become invalid.</p>
</td>
</tr>
<tr style="text-align:left;vertical-align:top;">
<td valign="middle" width="228" style="width:228px; border: solid 1px #000000;"><p>Send e‑mail with reset password</p>
</td>
<td valign="top" width="568" style="width:568px; border: solid 1px #000000;"><p>If enabled, users will receive another e‑mail containing their new password once they successfully reset it.</p>
</td>
</tr>
<tr style="text-align:left;vertical-align:top;">
<td colspan="2" valign="middle" width="568" style="width:568px; border: solid 1px #000000;"><p><span style="font-weight: bold;">Password policy</span></p>
</td>
</tr>
<tr style="text-align:left;vertical-align:top;">
<td valign="middle" width="228" style="width:228px; border: solid 1px #000000;"><p>Use password policy</p>
</td>
<td valign="top" width="568" style="width:568px; border: solid 1px #000000;"><p>Indicates if a security policy should be used to validate the passwords entered by users for their accounts. The details of the policy can be specified through the settings below. Passwords that do not meet the required conditions will be rejected.</p>
<p>&nbsp;</p>
<p>Enabling this setting does not change the passwords of existing users, it only adds requirements that must be fulfilled by new passwords.</p>
</td>
</tr>
<tr style="text-align:left;vertical-align:top;">
<td valign="middle" width="228" style="width:228px; border: solid 1px #000000;"><p>Minimal length</p>
</td>
<td valign="top" width="568" style="width:568px; border: solid 1px #000000;"><p>Sets the minimum number of total characters required for user passwords.</p>
</td>
</tr>
<tr style="text-align:left;vertical-align:top;">
<td valign="middle" width="228" style="width:228px; border: solid 1px #000000;"><p>Number of non alphanumeric characters</p>
</td>
<td valign="top" width="568" style="width:568px; border: solid 1px #000000;"><p>Sets the minimum number of non alphanumeric characters (i.e. any character except for numbers and letters) that must be present in a password in order for it to be accepted.</p>
</td>
</tr>
<tr style="text-align:left;vertical-align:top;">
<td valign="middle" width="228" style="width:228px; border: solid 1px #000000;"><p>Regular expression</p>
</td>
<td valign="top" width="568" style="width:568px; border: solid 1px #000000;"><p>Can be used to enter a regular expression that will be used to validate user passwords. This regular expression is applied in combination with the other policy settings. </p>
<p>&nbsp;</p>
<p>For example: <span style="font-style: italic;">^(?=.*\d)(?=.*[a-z])(?=.*[A-Z]).*$</span></p>
<p>&nbsp;</p>
<p>This sample expression would require passwords to contain at least one lower case letter, upper case letter and number. The minimum amount of characters would be determined by the remaining policy settings.</p>
</td>
</tr>
<tr style="text-align:left;vertical-align:top;">
<td valign="middle" width="228" style="width:228px; border: solid 1px #000000;"><p>Policy violation message</p>
</td>
<td valign="top" width="568" style="width:568px; border: solid 1px #000000;"><p>Specifies a custom text message that will be displayed to users who attempt to enter a password &nbsp;which does not fulfill the requirements of the password policy. If left empty, a default message will be shown, informing about the minimum password length and number of non alphanumeric characters.</p>
<p>&nbsp;</p>
<p>If you specify a regular expression for passwords, it is recommended to describe its requirements in this message.</p>
<p>&nbsp;</p>
<p>If your site has multiple cultures (languages) assigned to it, you can enter a different message for each language via the <span style="font-weight: bold;">Localize</span> (<img src="addnewuiculture.png" width="13" height="13" border="0" alt="AddNewUICulture">) action.</p>
</td>
</tr>
</table>
</div>
<p>&nbsp;</p>
<p>More resources can be found in:</p>
<p>&nbsp;</p>
<div style="text-align: left; text-indent: 0px; padding: 0px 0px 0px 0px; margin: 0px 0px 0px 7px;"><table border="0" cellpadding="0" cellspacing="0" style="line-height: normal;"><tr style="vertical-align:baseline" valign="baseline"><td width="13"><span style="font-size: 10pt; font-family: 'Arial Unicode MS', 'Lucida Sans Unicode', 'Arial'; color: #000000;">&#8226;</span></td><td><a href="http://devnet.kentico.com/docs/6_0/devguide/security_model.htm" target="_blank" class="weblink">Developer's Guide -&gt; Development -&gt; Membership, permissions and security</a></td></tr></table></div><div style="text-align: left; text-indent: 0px; padding: 0px 0px 0px 0px; margin: 0px 0px 0px 7px;"><table border="0" cellpadding="0" cellspacing="0" style="line-height: normal;"><tr style="vertical-align:baseline" valign="baseline"><td width="13"><span style="font-size: 10pt; font-family: 'Arial Unicode MS', 'Lucida Sans Unicode', 'Arial'; color: #000000;">&#8226;</span></td><td><a href="http://devnet.kentico.com/docs/6_0/devguide/authentication_password_settings.htm" target="_blank" class="weblink">Developer's Guide -&gt; Development -&gt; Membership, permissions and security -&gt; Authentication -&gt; Password settings</a></td></tr></table></div><p>&nbsp;</p>

<!--ZOOMSTOP--> 

<noscript>
<p class="help-url"><b>Help URL:&nbsp;</b><a href="<%HELP_LOCATION%><%DEVNET_PATH_NAME%>/index.html?settings_membershippasswords.htm" target="_top" title="Right-click to copy the URL of this help topic">
<%HELP_LOCATION%><%DEVNET_PATH_NAME%>/index.html?settings_membershippasswords.htm</a>
</p>
</noscript>
<script type="text/javascript">
var autoURL = true;
if (autoURL) {
      document.write(getHref("index.html","Help URL:","Right-click to copy the URL of this help topic"));
      } else {
             document.write('<p class="help-url"><b>Help URL:&nbsp;</b>');
             document.write('<a href="<%HELP_LOCATION%><%DEVNET_PATH_NAME%>/index.html?settings_membershippasswords.htm" target="_top" title="Right-click to copy the URL of this help topic"><%HELP_LOCATION%><%DEVNET_PATH_NAME%>/index.html?settings_membershippasswords.htm</a>');
             document.write('</p>');
      }
</script>

</div></div> 
</body>
</html>





